Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/1PeK2rVaekZNVC3o3pyzwNQgzhE.roa
File: 1PeK2rVaekZNVC3o3pyzwNQgzhE.roa (raw, json)
Hash identifier: bT8T+lq1jJgvGdCk3qnNPwcbcmXO99rl74JJHuWU1R4=
Subject key identifier: D4:F7:8A:DA:B5:5A:7A:46:4D:54:2D:E8:DE:9C:B3:C0:D4:20:CE:11
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 019EABEEC296EDC8541D409824F005AACDDF
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/1PeK2rVaekZNVC3o3pyzwNQgzhE.roa
Signing time: Tue 09 Jun 2026 10:30:11 +0000
ROA not before: Tue 09 Jun 2026 10:30:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211612
IP address blocks: 2a0b:1880:b::/48 maxlen: 48
2a0b:1880:c::/48 maxlen: 48
2a0b:1880:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:ee:c2:96:ed:c8:54:1d:40:98:24:f0:05:aa:cd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Jun 9 10:30:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4f78adab55a7a464d542de8de9cb3c0d420ce11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:36:db:ea:fe:df:1e:bc:a1:78:c2:5b:de:
dc:bb:8c:47:f6:b7:d2:a8:75:ef:06:ad:b3:49:cb:
d7:a5:39:50:d4:60:74:92:a7:92:bc:a2:0a:ab:f4:
dd:71:9a:a9:dc:d3:92:04:be:fc:08:84:9d:ec:73:
4f:fe:91:13:28:7f:0d:6d:68:35:12:56:6b:bf:66:
04:d9:c1:38:05:a6:84:75:94:a0:7b:06:e0:c2:89:
af:9f:5d:b7:00:fa:52:27:bb:3b:81:02:ea:4b:e4:
eb:fb:d0:a6:18:10:a0:7f:27:48:c6:e0:51:ec:fe:
ff:f1:6a:0b:d4:ac:ad:69:9a:10:16:40:4f:75:b5:
ba:f3:3f:e2:8a:47:e6:64:57:4b:03:f0:49:d2:af:
15:a2:f0:b9:40:dd:30:a1:c3:c3:51:59:92:37:e7:
81:3f:04:ca:87:d4:f3:ed:cc:43:c4:bb:bc:fe:7d:
b8:a8:a8:70:12:66:59:df:c7:5f:45:08:00:60:f6:
50:1c:1a:b3:96:33:6e:63:8f:da:d4:85:54:ca:d2:
56:a7:f3:49:7a:e8:ca:57:b7:05:6a:86:65:2c:21:
0e:f1:6a:23:82:6f:34:8c:ef:fa:7e:45:d0:9e:2c:
35:b3:71:a8:52:54:c5:9c:ac:28:15:19:60:39:86:
4f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F7:8A:DA:B5:5A:7A:46:4D:54:2D:E8:DE:9C:B3:C0:D4:20:CE:11
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/1PeK2rVaekZNVC3o3pyzwNQgzhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1880:b::-2a0b:1880:d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
62:20:42:bc:04:d9:e1:b7:51:cc:e7:97:64:f9:74:b3:0e:74:
69:01:4a:23:0e:39:14:14:cb:eb:8a:ac:8d:d3:28:bf:05:ba:
d2:07:07:09:68:16:63:a9:bc:32:0c:6c:0f:15:54:f8:7e:35:
47:66:f0:7a:82:61:12:fb:b7:2d:4f:0b:b0:50:46:2d:e4:b8:
3d:19:6e:e1:6e:2b:c2:25:c0:e1:1e:2a:2d:bc:4d:e3:1d:68:
da:8f:b7:35:d9:37:ef:b3:51:56:b1:06:c6:c8:b8:8e:23:5f:
d4:f1:a4:cd:40:fb:71:52:aa:21:92:95:b8:ae:19:7d:c0:81:
db:d5:3c:b6:2a:a2:fb:c9:8f:66:2d:55:4e:8e:58:b6:0a:48:
5a:1e:1b:9c:8a:22:e8:62:84:90:3c:76:67:3e:b5:ac:07:29:
12:d7:34:e6:04:25:35:29:f7:07:e3:a4:ee:0c:d7:34:74:e6:
6f:b6:32:e8:27:95:1a:5f:47:3e:c9:cf:7c:cc:3e:88:94:66:
db:63:c5:15:ee:8b:73:d4:73:db:7e:e4:8c:7d:db:47:f3:c7:
02:8e:8d:46:b7:4b:e9:79:40:f9:52:0f:2f:82:ef:cd:86:79:
ee:94:db:7c:66:4b:0c:52:cf:71:97:a8:2f:7a:0c:3d:e8:56:
ba:cc:79:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 12 12:01:46 2026 by rpki-client